This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json) Hash identifier: pBEKwSTplyMhCg+CqokWvHnNd/cqLsODQzeiOnLqAWo= Subject key identifier: 45:3B:4D:03:A4:3E:93:E9:0F:51:84:D8:89:1E:0B:1B:26:CB:2B:50 Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Certificate serial: 019AF1D1C942A824AE089C988CD52629B650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft Manifest number: 0E0B Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=) 2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: HtrKQt6urxe02CwVDDNWrdrSrdG4gKINh7cMokvCWYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c9:42:a8:24:ae:08:9c:98:8c:d5:26:29:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=453b4d03a43e93e90f5184d8891e0b1b26cb2b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:0d:b3:17:9d:e0:af:83:12:cd:c9:5c:b9: fb:d2:d2:cd:db:9b:10:b9:99:39:c9:67:f9:a7:a3: 33:ec:13:56:20:d8:ce:60:88:b9:5f:79:1d:fb:56: 4e:8d:11:ff:09:58:d4:f4:5f:fc:2d:db:fc:2a:ad: 6a:58:c4:ec:c3:37:ab:6e:2d:d6:b6:28:c5:80:80: fa:e8:37:ee:20:8a:0c:fd:42:0f:7c:5e:14:70:00: 2f:ef:a2:ec:95:6c:f9:37:d6:00:28:35:ba:3a:37: 7b:17:31:33:6a:7c:60:29:75:77:26:ef:45:12:4c: 5b:fd:22:bf:ef:21:00:a9:fc:3e:15:61:63:d9:2b: 17:0b:62:31:0e:c2:3f:9d:f4:94:5f:0e:bd:a8:06: 26:e9:6d:b3:de:a7:f0:73:bb:d9:1f:25:e3:77:52: bf:3d:86:11:bc:ae:64:c5:f6:b9:33:52:ba:88:ec: fc:0c:c3:dd:e9:95:a3:92:39:cf:03:7d:53:fb:ed: 5e:cd:3d:f8:60:c5:35:6a:30:bc:28:0e:9c:88:f7: 20:87:7c:d8:61:a9:cf:b9:b2:80:f8:6b:c1:a6:59: 76:3a:ec:0a:ab:98:4c:16:df:bc:b6:bb:2b:1d:c0: c6:d6:66:56:0e:89:08:04:fd:2a:4d:b3:8c:f4:fd: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3B:4D:03:A4:3E:93:E9:0F:51:84:D8:89:1E:0B:1B:26:CB:2B:50 X509v3 Authority Key Identifier: keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:17:56:9d:f0:73:1e:de:da:1c:af:ff:e2:36:76:a0:fa:ec: d9:bb:29:d8:5e:c8:76:88:e1:cc:9e:72:90:67:9b:2b:d7:21: 76:da:e0:fd:2a:8e:c6:12:75:a1:e9:36:b2:ff:00:87:94:c4: c7:d4:1b:52:f9:ea:b7:b6:67:82:d7:ef:ac:1d:93:5e:7e:f2: 73:4c:d2:fc:34:df:46:24:19:bf:b6:91:48:79:bf:b9:a2:5e: 7c:47:af:0f:55:0f:c8:4c:69:4d:cd:be:a3:f0:63:71:b0:f3: 38:a6:d6:e0:40:ae:1d:b1:2f:93:b8:0d:f6:c6:10:4d:82:c0: e2:9e:c9:e2:58:f6:df:5c:c3:d6:ac:33:e6:a3:33:75:e0:14: ba:c1:41:97:b2:eb:c8:c8:ba:95:c5:c8:53:5c:c8:14:a1:9c: fc:17:d2:61:66:7c:35:95:f5:55:96:f4:ca:59:a2:e0:72:44: a7:10:21:10:ee:d9:cb:a3:70:0e:9f:98:5b:42:21:48:47:1d: 58:49:1d:f7:27:e4:4d:55:cd:c1:24:fc:2f:0f:cb:2a:11:44: 3f:fe:3f:f3:56:90:92:b9:53:a2:22:e5:ed:40:85:53:fb:c7: 7a:b1:d8:d0:6e:78:fc:9c:f1:e2:a4:5e:52:28:d0:26:d4:e2: 1a:68:a2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0clCqCSuCJyYjNUmKbZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm ZmUyZjgwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD Eyg0NTNiNGQwM2E0M2U5M2U5MGY1MTg0ZDg4OTFlMGIxYjI2Y2IyYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk8Nsxed4K+DEs3JXLn70tLN25sQ uZk5yWf5p6Mz7BNWINjOYIi5X3kd+1ZOjRH/CVjU9F/8Ldv8Kq1qWMTswzerbi3W tijFgID66DfuIIoM/UIPfF4UcAAv76LslWz5N9YAKDW6Ojd7FzEzanxgKXV3Ju9F Ekxb/SK/7yEAqfw+FWFj2SsXC2IxDsI/nfSUXw69qAYm6W2z3qfwc7vZHyXjd1K/ PYYRvK5kxfa5M1K6iOz8DMPd6ZWjkjnPA31T++1ezT34YMU1ajC8KA6ciPcgh3zY YanPubKA+GvBpll2OuwKq5hMFt+8trsrHcDG1mZWDokIBP0qTbOM9P2nMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU7TQOkPpPpD1GE2IkeCxsmyytQMB8GA1UdIwQY MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRdWnfBz Ht7aHK//4jZ2oPrs2bsp2F7IdojhzJ5ykGebK9chdtrg/SqOxhJ1oek2sv8Ah5TE x9QbUvnqt7ZngtfvrB2TXn7yc0zS/DTfRiQZv7aRSHm/uaJefEevD1UPyExpTc2+ o/BjcbDzOKbW4ECuHbEvk7gN9sYQTYLA4p7J4lj231zD1qwz5qMzdeAUusFBl7Lr yMi6lcXIU1zIFKGc/BfSYWZ8NZX1VZb0ylmi4HJEpxAhEO7Zy6NwDp+YW0IhSEcd WEkd9yfkTVXNwST8Lw/LKhFEP/4/81aQkrlToiLl7UCFU/vHerHY0G54/Jzx4qRe UijQJtTiGmiiQA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:03 2025 by rpki-client